Method and system for anonymous checkout in a store

ABSTRACT

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for anonymous checkout in a store. One of the methods includes receiving, by a computer system of the store, information associated with a payment account of a person; sending, by the computer system to a server associated with a payment system, the received information associated with the payment account of the person; receiving, by the computer system from the server associated with the payment system, a token associated with the payment account of the person; receiving, by the computer system from a plurality of sensors, data associated with the person; extracting, by the computer system based on the received data associated with the person, a plurality of features of the person; and storing, by the computer system, the received token in correspondence with information associated with the extracted features of the person.

TECHNICAL FIELD

The disclosure relates generally to anonymous checkout in a store.

BACKGROUND

At least partial automation of human tasks in shopping environments may be achieved by implementing various computing and sensing systems in the shopping environments. In order to automate necessary human tasks (e.g., checkout), the computing or sensing systems may have to collect various data associated with a customer, such as those for user appearance, user behavior, items purchased, or budget spent. The collected data may be highly personal and valuable in nature. Linking such data with other private or personal information about the customer (e.g., banking information, credit information) may give rise to privacy concerns and security risks.

SUMMARY

Various embodiments of the present disclosure can include systems, methods, and non-transitory computer readable media for anonymous checkout in a store.

According to one aspect, a method for anonymous checkout in a store may include receiving, by a computer system of the store, information associated with a payment account of a person; sending, by the computer system to a server associated with a payment system, the received information associated with the payment account of the person; receiving, by the computer system from the server associated with the payment system, a token associated with the payment account of the person; receiving, by the computer system from a plurality of sensors, data associated with the person; extracting, by the computer system based on the received data associated with the person, a plurality of features of the person; and storing, by the computer system, the received token in correspondence with information associated with the extracted features of the person.

In some embodiments, the method may further comprise: identifying, by the computer system based on the received data associated with the person, one or more interactions of the person with one or more product items; generating, by the computer system, a bill based on the identified one or more interactions, wherein the bill comprises a payment amount; and sending, by the computer system to the server associated with the payment system, a payment request comprising the payment amount and the token associated with the payment account of the person.

In some embodiments, the identifying one or more interactions of the person with one or more product items may comprise: determining, based on the data received from one or more of the sensors, that the person is located in proximity to one of the one or more product items; detecting one or more movements of a hand of the person with respect to the product item; and identifying one of the interactions based on the one or more detected movements.

In some embodiments, the generating a bill based on the identified one or more interactions may comprise: creating, by the computer system, a log associated with the person; adding, by the computer system, a plurality of entries to the log, wherein one or more of the entries correspond to the one or more interactions of the person with the one or more product items; and generating the bill based on the log.

In some embodiments, the method may further comprise, subsequent to the sending the payment amount and the token associated with the payment account of the person: deleting the stored token associated with the payment account of the person and the extracted features of the person.

In some embodiments, the token associated with the payment account of the person may comprise: ciphertext based on encryption of at least part of the received information associated with the payment account of the person.

In some embodiments, the storing the received token in correspondence with information associated with the extracted features of the person may comprise: generating a representation of one or more of the extracted features; and storing the received token in correspondence with the generated representation.

In some embodiments, the generating a representation of one or more of the extracted features may comprise: encrypting information associated with the one or more of the extracted features.

In some embodiments, the extracting a plurality of features of the person may comprise: obtaining, by the computer system based on the data received from the sensors, a plurality of values associated with a feature of the person, wherein each of the values is determined based on the data received from one of the sensors; and determining, by the computer system, a final value corresponding to the feature of the person based on a weighted average of the plurality of values.

According to another aspect, a system for anonymous checkout in a store may comprise a computer system and a plurality of image sensors. The computer system may comprise one or more processors and one or more non-transitory computer-readable storage media storing instructions executable by the one or more processors to cause the system to perform operations. The operations may comprise: receiving, by the computer system, information associated with a payment account of a person; sending, by the computer system to a server associated with a payment system, the received information associated with the payment account of the person; receiving, by the computer system from the server associated with the payment system, a token associated with the payment account of the person; receiving, by the computer system from the sensors, data associated with the person; extracting, by the computer system based on the received data associated with the person, a plurality of features of the person; and storing, by the computer system, the received token in correspondence with information associated with the extracted features of the person.

According to yet another aspect, a non-transitory computer-readable storage medium for anonymous checkout in a store may be configured with instructions executable by one or more processors to cause the one or more processors to perform operations. The operations may comprise: receiving information associated with a payment account of a person; sending, to a server associated with a payment system, the received information associated with the payment account of the person; receiving, from the server associated with the payment system, a token associated with the payment account of the person; receiving, from a plurality of sensors, data associated with the person; extracting, based on the received data associated with the person, a plurality of features of the person; and storing the received token in correspondence with information associated with the extracted features of the person.

These and other features of the systems, methods, and non-transitory computer readable media disclosed herein, as well as the methods of operation and functions of the related elements of structure and the combination of parts and economies of manufacture, will become more apparent upon consideration of the following description and the appended claims with reference to the accompanying drawings, all of which form a part of this specification, wherein like reference numerals designate corresponding parts in the various figures. It is to be expressly understood, however, that the drawings are for purposes of illustration and description only and are not intended as a definition of the limits of the invention.

BRIEF DESCRIPTION OF THE DRAWINGS

Preferred and non-limiting embodiments of the invention may be more readily understood by referring to the accompanying drawings in which:

FIG. 1 illustrates an example setup of an automated-checkout store.

FIG. 2 illustrates example locations to place sensors in an automated-checkout store.

FIG. 3 illustrates an example architecture for gathering and processing data from sensors.

FIG. 4 illustrates an example method for tracking a product item in an automated-checkout store.

FIG. 5 illustrates an example setup for detecting interactions between a person and a product item using image sensors.

FIG. 6 illustrates an example setup for detecting interactions between a person and a product item using image sensors and optical devices.

FIG. 7 illustrates an example network environment for anonymous checkout in a store.

FIG. 8 illustrates an example method for collecting a payment while protecting customer privacy in a store.

FIG. 9 illustrates an example method for anonymous checkout in a store.

FIG. 10 illustrates an example electronic device.

DETAILED DESCRIPTION OF THE EMBODIMENTS

Specific, non-limiting embodiments of the present invention will now be described with reference to the drawings. Particular features and aspects of any embodiment disclosed herein may be used and/or combined with particular features and aspects of any other embodiment disclosed herein. It should also be understood that such embodiments are by way of example and are merely illustrative of a small number of embodiments within the scope of the present invention. Various changes and modifications obvious to one skilled in the art to which the present invention pertains arc deemed to be within the spirit, scope and contemplation of the present invention as further defined in the appended claims.

In some embodiments, the invention is related to a method for anonymous checkout in a store, comprising: receiving, by a computer system of the store, information associated with a payment account of a person; sending, by the computer system to a server associated with a payment system, the received information associated with the payment account of the person; receiving, by the computer system from the server associated with the payment system, a token associated with the payment account of the person; receiving, by the computer system from a plurality of sensors, data associated with the person; extracting, by the computer system based on the received data associated with the person, a plurality of features of the person; storing, by the computer system, the received token in correspondence with information associated with the extracted features of the person; receiving authentication of personal information from the person via the person's identifying items, wherein the person's identifying items comprise a phone, a credit card, a membership card, a QR code or the user's biometrics information; capturing a plurality of videos and images of the person by a plurality of cameras; processing the plurality of videos and images to track the person in each field of view of the plurality of cameras; finding information for a trip of the person in the retail store based on the processing of the plurality of videos and images, wherein the information for the trip comprises time spent of the person at each shelf in the retail store, time the person spent to compare different items, time the person spent on certain category of products; and providing dynamic pricing of items to the person based the information for the trip of the person, wherein the dynamic pricing of the times are determined by time and date of visit of the person.

In some embodiments, the current invention relates to a system for anonymous checkout in a store comprising a computer system and a plurality of sensors, the computer system comprising one or more processors and one or more non-transitory computer-readable storage media storing instructions executable by the one or more processors to cause the system to perform operations comprising: receiving, by the computer system, information associated with a payment account of a person; sending, by the computer system to a server associated with a payment system, the received information associated with the payment account of the person; receiving, by the computer system from the server associated with the payment system, a token associated with the payment account of the person; receiving, by the computer system from the sensors, data associated with the person; extracting, by the computer system based on the received data associated with the person, a plurality of features of the person; and storing, by the computer system, the received token in correspondence with information associated with the extracted features of the person; capturing a plurality of videos and images of the person by a plurality of cameras; processing the plurality of videos and images to track the person in each field of view of the plurality of cameras; finding information for a trip of the person in the retail store based on the processing of the plurality of videos and images, wherein the information for the trip comprises time spent of the person at each shelf in the retail store, time the person spent to compare different items, time the person spent on certain category of products; and providing dynamic pricing of items to the person based the information for the trip of the person.

In some embodiments, a store may provide automated checkout services to customers. Such an automated-checkout store may comprise a plurality of sensors that collect data from the environment, and particular about product items and persons in the store. A computer system in the automated-checkout store may process the data collected by the sensors to recognize and track product items, to identify and track persons, and to determine interactions between the persons and the product items. Based on the sensor data, the computer system may determine a person's activities such as picking up a product item from a shelf, placing a product item back, dropping a product item in a shopping cart, or other activities of interest. The computer system may also determine the identities and prices of the product items interacted with by the person. In this manner, the computer system may automatically charge the person based on her purchase and generate an itemized receipt. In some embodiments, a person entering such an automated-checkout store may provide identification information by, for example, swiping a payment card or identification card, scanning a quick response (“QR”) code or a ticket. The person may then freely pick up product items on sale in the store. Based on data collected by sensors in the store, a computer system may automatically determine the activities of the person. After shopping, the person may directly walk out of the store, knowing that an appropriate payment will be automatically deducted from her account. Particular embodiments may reduce or eliminate the need for human labor for managing a retail environment, provide customers a quick and smooth shopping and checkout experience, and reduce a likelihood of mistakes that may be made by the retailer. Furthermore, particular embodiments use an integrated system to manage various aspects of the retail environment. Such a system may effectively coordinate various services and efficiently use or re-use information collected for different purposes. For example, a detected activity by a person of picking up a product item and placing it in a shopping cart may be used to determine an inventory level of the product item as well as to generate a bill for the customer. In this manner, the efficiency of computer systems used in retail environments may be improved.

In some embodiments, an automated-checkout store may take various measures to protect customers' privacy. For example, a computer system of the store may refrain from directly accessing a customer's payment account information but may only keep a token associated with a payment account of a customer in order to request for a payment. The token may be deprived of any personal information of the customer. As another example, the computer system of the store may encrypt the customer's appearance data, location information, movement data, interactions with product items, and other personal information. As yet another example, the computer system of the store may remove information associated with the customer after the purchasing transaction is complete (such as when the payment is cleared, or return window is closed). Such a system may provide customer privacy protection while offering automated checkout services.

In some embodiments, the automated-checkout system may be installed in a traditional retail environment by affixing sensors and computing systems in different areas of the environment. In other embodiments, the automated-checkout system may be implemented as a “Nano Store” or a walk-in vending machine, which may be a modular brick & mortar store that is built in with automated checkout technologies. The Nano Store or walk-in vending machine may be of a small and manageable size (e.g., 200 square feet). It may be built in with all the fixtures, sensors, and computer systems, so that the store will automatically monitor customer activities and provide automated checkout. It may be easily disassembled, re-assembled, and transported. Alternatively, it may be implemented within a unitary enclosure. The enclosure may be made mobile using, for example, wheels at the bottom. Robotic tools (e.g., robotic arms) may also be used in such a store to facilitate functions such as automatic stocking of product items. [00341 In some embodiments, one or more vending machines may be attached to an external surface of an automated-checkout store. The vending machines provide for sale product items such as hot or cold drinks, food, tobacco products, other suitable product items, or any combination thereof. A customer may purchase product items from the vending machine using, for example, a credit card or a phone application. In some embodiments, one or more lockers may be attached to an external surface of an automated-checkout store. The lockers may be unlockable using passcodes. Packages for customers as well as product items bought from e-commerce websites may be placed in the lockers for the customers to pick up. As an example and not by way of limitation, after placing an order for a product item on an e-commerce website, a customer may receive an email indicating a locker that the product item is placed in and a passcode to open the locker. The customer may go to the automated-checkout store to pick up the product item. In some embodiments, the lockers may share a heating-cooling system associated with the automated-checkout store such that some of the lockers may be heated and some other lockers may be cooled. The different types of lockers may be color-coded to indicate their temperature (e.g., red for heated, blue for cooled, green for room-temperature ones). These temperature-controlled lockers may be suitable for products that require certain temperatures, such as hot dishes from a local restaurant or ice creams. In some embodiments, the automated-checkout store may be integrated with one or more other suitable devices (e.g., lottery machine).

FIG. 1 illustrates an example setup of an automated-checkout store 100. The automated-checkout store 100 may comprise a system for tracking a product item in the store 100. In some embodiments, the automated-checkout store 100 may provide an enclosed environment. The store 100 may comprise one or more doors 110, and one or more shelves, such as 120 a and 120 b. The doors 110 may be hinged doors, revolving doors, sliding doors, or other suitable doors. In some embodiments, the store 100 may comprise two sets of doors 110 with a small space in between to prevent multiple people entering the store at once, which may complicate tracking of the people. In some embodiments, the shelves 120 may hold product items 130 for selection and purchase by a customer. In some embodiments, the automated-checkout store 100 may comprise one or more outer surfaces 14( ) that may be used for a plurality of potential purposes (e.g., displaying advertisements).

FIG. 2 illustrates example locations to place sensors in an automated checkout store. In some embodiments, one or more sensors may be affixed to one or more structures in the automated-checkout store. The structures may comprise, for example, a ceiling, a floor, a shelf, a rack, a refrigerator, other suitable structures, or any combination thereof. Illustrated by FIG. 2 may be an inner space of an automated checkout store. It may comprise one or more shelves 210, a ceiling 220, one or more fixtures 230 (e.g., a peg), a floor 240. In order to collect data about product items and persons in the automated checkout store, a plurality of sensors may be placed in various locations in the indoor environment. For example, one or more sensors 211 may be affixed to the bottom of each shelf, one or more sensors 212 may be affixed above each shelf, and one or more sensors 213 may be affixed on a backboard supporting the shelves. As another example, one or more sensors 221 may be affixed to the ceiling 220, one or more sensors 231 may be affixed to fixtures 230, and one or more sensors 241 may be affixed to the floor 240.

In some embodiments, the sensors placed in the automated-checkout store 100 may comprise one or more image sensors (e.g., RGB cameras, IR cameras, depth cameras), one or more weight sensors, one or more force sensors, one or more pressure sensors, one or more vibration sensors, one or more proximity sensors, one or more resistance-based film sensors, one or more capacitive sensors, other suitable sensors, or any combination thereof. The sensors may be used to collect signals associated one or more product items and one or more persons. In some embodiments, the sensors may be powered through one or more network cables using power over ethernet (“POE”). The sensors may also be powered using one or more other suitable methods or devices.

As an example and not by way of limitation, one or more weight sensors affixed to a shelf may measure weights of one or more product items; one or more pressure sensors affixed to the shelf may measure the shape of bottom surfaces of the product items and determine their respective positions. One or more image sensors may determine the colors and other appearance characteristics of the product items. Based on data from the weight sensors, pressure sensors, image sensors, or one or more other sensors, a computer system associated with the automated-checkout store may determine a type of the product items and a number of the product items that are placed on the shelf. Based on a change to the data from one or more of the sensors, the computer system may determine if one or more product items are placed on or removed from the shelf or if one or more product items are partially removed or depleted.

As another example and not by way of limitation, vibration sensors placed on corners of a shelf may be used to detect vibration corresponding to an event associated with product items placed on the shelf(e.g., a customer picking up a product item). One or more proximity sensors (e.g., comprising one or more infrared transceivers) placed on a surface of the shelf may detect a proximity of a hand of a customer to one or more product items, which may be used to determine a movement of the hand (e.g., hovering over a product item). The data gathered by the vibration sensors and the proximity sensors may be complemented by data from one or more image sensors which may comprise one or more images of the customer and the one or more product items. Based on the data collected by these sensors, a computer system associated with the automated checkout store may determine one or more movements of the hand of a customer with respect to one or more product items and may thereby determine customer activities such as picking up a product item or placing a product item on a shelf.

As yet another example and not by way of limitation, a plurality of image sensors may be used to gather image data of a person moving in the automated-checkout store 100. One or more computing devices or components thereof (e.g., a graphics processing unit (GPU), a central processing unit (CPU), a system on a chip (SOC)) may be used to process digital images and videos captured by the image sensors. Each image sensor or group of image sensors may collect data from a particular area of the automated-checkout store 100. Data from each of one or more image sensors may be processed to determine a probability that a particular person is at a particular location. The processing results may be aggregated to determine a location of the person and to construct a model reflecting a movement path of the person during a particular period of time. The data gathered by the image sensors may be supplemented by data gathered by one or more weight sensors placed below the surface of the floor near the door 110 of the automated-checkout store 100. Changes to data from the weight sensors may indicate that a person walks in or out of the store 100.

In some embodiments, one or more image sensors in the automated-checkout store may be automatically calibrated. One or more projectors may be installed in the store. The projectors may project patterns on, for example, the floor or ceiling of the store. One or more parameters of the image sensors (e.g., position, angle, distortion factor) may be calibrated based on the portion of the pattern captured by the image sensors. Similarly, one or more patterns may be printed on one or more fixtures within the store (e.g., shelves). The image sensors may capture images of such patterns and automatically calibrate their parameters. In some embodiments, the projectors may also be used to project one or more images that may improve user experience. For example, price or other information about one or more products may be projected on the products.

FIG. 3 illustrates an example system for gathering and processing data from sensors. In some embodiments, a computer system in an automated-checkout store may have the structure illustrated by FIG. 3 and may comprise one or more of the components or layers shown in FIG. 3 . In some embodiments, the system may be configured to receive many types of input from many different sensing sources. These inputs may include image and/or video signals from an array of cameras mounted in various parts of an automated-checkout store such as the ceiling, cashier level, shelf level, signals from touch capacitive sensors on shelfs, signals from weight sensors on shelfs, signals from force sensors shelfs, and/or vibration sensors on shelfs. The system may use these signals to identify a customer and monitor the product items that the customer takes out of the store, and thus automatically checkout the product items. The system may also use these signals to calculate an inventory level of each of a plurality of retail products within the store.

In some embodiments, the system may comprise a sensing layer 310 that include a plurality of sensors that provide the system with different types of data. One or more sensors (e.g., single camera (SC), multi-camera (MC), cameras at the checkout area of the retail store) may monitor people, such as customers and employees, as they move around and through the store. One or more sensors (e.g., capacitive sensors, force sensors, vibration sensors, weight sensors, location aware pressure sensors) may track objects such as retail products on a plurality of shelves.

In some embodiments, the system may comprise a real time layer 320 that may determine when trigger events occur and determine logic of virtual carts. For example, the real time layer 320 may be configured to analyze the 3D rending of motion of a particular customer and determine that the customer is reaching for an item on a particular shelf. Using this information along with weighting information from the particular shelf, as well as weight data, location aware pressure sensing data, and images of the particular shelf, the system can determine that a particular customer takes a particular product. The system is capable of taking information from a variety of sources, analyze the data in context with other data to obtain an accurate analysis of events occurring in the automated-checkout store. For example, the real time layer 320 at a present time may determine and log an event where the particular customer puts a bunch of bananas in a shopping cart. Subsequent to the present time, the real time layer may determine that out of a direct line of sight with one of the array of cameras in the retail store that the particular customer puts an item back on the shelf, Using weight information, location aware pressure sensing and vibration sensing, the system may output a plurality of probabilities of what the item that was placed on the shelf was. With the information that the bunch of bananas was previously placed in the shopping cart, the system may determine that where the particular customer put the bunch of bananas.

In some embodiments, the system may comprise a persistent layer 330 that may execute operations related to payments and customer authentication. For example, before a customer may be granted access to the automated-checkout store, the user may be required to swipe a credit card or provide login information. The persistent layer 330 may be configured to authenticate the user and/or payment method by the user.

In some embodiments, the system may comprise a client layer 340 that may execute operations related to client interaction. For example, the client layer 340 may provide an output or display at a checkout counter. The information displayed may comprise an itemized receipt of all of the items in a particular customer's possession. In some embodiments, the client layer 340 may be configured to provide personalized advertisement as the particular customer walks through the store. For example, if the system determines that the customer is a parent carrying a baby, as the customer walks down an aisle of baby products, the client layer 340 of the system may be configured to output advertisements of a sale for a particular brand of diapers.

In some embodiments, the automated-checkout store may be associated with a computer system for processing the data collected by various sensors. The computer system may comprise one or more suitable electronic devices. In some embodiments, the computer system may use sensor fusion to aggregate data received from multiple sensors. In doing so, the computer system may combine sensory data or data derived from disparate sources using error-resistance algorithms such that the resulting information has less uncertainty than would be possible when these sources were used individually. Using sensor fusion, the computer system may derive additional data than that sensed by each sensor (e.g., calculation of depth information by combining two-dimensional images from two cameras at slightly different viewpoints). In some embodiments, the computer system may perform direct fusion, which may comprise the fusion of sensor data from a set of heterogeneous or homogeneous sensors, soft sensors, and history values of sensor data. The computer system may also perform indirect fusion that uses information sources like a priori knowledge about the environment and human input. The computer system may use one or more methods or algorithms such as the central limit theorem, Kalman filter, Bayesian networks, Dempster-Shafer theory, or convolutional neural network. In some embodiments, sensor fusion for an automated-checkout store may be performed at a centralized computer system. Alternatively or additionally, sensor fusion may be performed by one or more localized computer sub-systems, whose outputs may later be aggregated. In some embodiments, using sensor fusion, the computer system may calculate a distribution for a particular value to be determined, including an average, a range, and one or more deviations. The computer system may also assign trustworthiness values for different factors contributing and weigh the factors based on the trustworthiness values.

A Bayesian network, decision network, probability network, or probabilistic directed acyclic graphical model may be a probabilistic graphical model (a type of statistical model) that represents a set of variables and their conditional dependencies via a directed acyclic graph (DAG). Nodes in a DAG may represent variables such as observable quantities, latent variables, unknown parameters, or hypotheses. Edges in a DAG may represent conditional dependencies; nodes that are not connected (no path connects one node to another) represent variables that are conditionally independent of each other. Each node may be associated with a probability function that takes, as input, a particular set of values for the node's parent variables and gives (as output) the probability (or probability distribution, if applicable) of the variable represented by the node. Bayesian networks may be used to take an event that occurred and predict the likelihood that any one of several possible known causes was the contributing factor. Bayesian networks may be used to infer unobserved variables or to learn parameters or structures.

FIG. 4 illustrates an example method for tracking a product item in an automated-checkout store. The method may begin at step 410, where a computer system associated with the automated-checkout store may receive data collected by a plurality of sensors. The sensors may comprise at least one or more cameras and one or more weight sensors.

At step 420, the computer system may identify an account associated with a person who enters the store. In some embodiments, the computer system may determine that a person enters the store based on signals from one or more of the sensors such as, for example, a camera pointing at the door of the store or a weight sensor below the floor near the door. In some embodiments, the computer system may identify an account associated with the person based on information provided by the person. For example, the person may be required to swipe a credit card or provide login information before being granted access to the store. The computer system may identify the account associated with the person based on information associated with the credit card or the login. In some embodiments, the computer system may determine an account based on a determined identity of the user. The computer system may determine the identity of the person based on data received from one or more of the sensors (e.g., cameras). The received data ma be fed into a machine-learning model for determining identity of users. The model may comprise features corresponding to characteristics such as hair color, appearance of cloths, height, other suitable features specified by human or generated by machine-learning algorithms, or any combination thereof. The machine-learning model may have been trained by real-world data or data generated by simulations. For example, the training data may be generated by modifying real-world images by changing a background or environment in which a person is located to be a plurality of options. The collected data may be compared with data stored by or otherwise accessible to the computer system that correlate accounts or identities of persons with characteristics of their appearance. In this manner, the account associated with the person may be identified without input from the person.

At step 430, the computer system receiving data on movement of the product item collected by one or more of the sensors. The movement of the product item may indicate that an event has occurred to the product item. The event may comprise, for example, a product item being picked up by a person, a product item being placed in a shopping cart, a product item being placed back on a shelf, another suitable event, or any combination thereof.

At step 440, the computer system may determine an interaction between the person and the product item based on data collected by one or more of the sensors. In some embodiments, to determine an interaction between the person and the product item, the computer system may determine, based on data received from one or more of the sensors, that the person is located in proximity to the product item in a period of time. It may then detect one or more movements of a hand of the person with respect to the product item and determine the interaction based on the one or more detected movements. In some embodiments, the computer system may perform gaze-tracking or eye-tracking on a person, based on which the computer system may determine one or more product items that the person is looking at. For example, one or more IR cameras may be placed on a shelf and be configured to catch light reflected from eyes (e.g., retinas) of the person. Based on data associated with the captured light, the computer system may determine a direction of the gaze of the person, thus determining one or more product items that the person is looking at.

In some embodiments, an interaction between a person and a product item may be determined based on data collected by one or more image sensors. FIG. 5 illustrates an example setup for detecting interactions between a person and a product item using image sensors. As shown in FIG. 5 , a person may interact with a product item placed on a fixture 510. Two image sensors 530 a and 530 b may be affixed on the fixture 510. An image sensor 520 may be affixed on the ceiling. The image sensors 520, 530 a, and 530 b may all be configured such that they can record images or videos of a person's hand 540 interacting with items held by the fixture 510.

FIG. 6 illustrates an example setup for detecting interactions between a person and a product item using image sensors and optical devices. As shown in FIG. 6 , a person 640 may interact with a product item placed on a fixture 610. The setup may comprise a mirror 630 set at an appropriate angle with respect to the ground (e.g., 45 degrees). The mirror may be affixed on the fixture 610 or another object within the environment (e.g., ceiling). An image sensor 620 may be configured to capture light reflected by the mirror 630, which may include the product item and the hand of the person 640. In some embodiments, one or more other optical devices may be used to replace the mirror 630. Particular embodiments may reduce the number of image sensors needed to cover a particular field. Particular embodiments may allow placement of image sensors at convenient positions and may avoid obstruction by objects in an indoor environment. For example, with the help of optical devices, an image sensor affixed to the ceiling of the store may be able to collect visual data from certain angles that would normally require a substantially higher ceiling if the optical devices were not available.

In some embodiments, the computer system may be configured to utilize machine-learning models to keep track of inventory of product items and people interacting with the product items. The computer system may receive data from a plurality of sensors and apply the data to machine-learning models. The different sources may include digital images or videos from an array of cameras mounted in various parts of a retail store, such as the ceiling, cashier level, shelf level cameras, signals from weight sensors, force sensors and vibration sensors on shelves. The different types of data may be used to train the machine-learning model, and allow the machine-learning model to learn and recognize actions performed by customers in the retail environment and label these actions for future recognition. In addition to currently-received sensor data, the computer system may also consider previously-received data in determining the interaction. In particular, the computer system may calculate a conditional probability of a particular activity of a person based on prior detected activities of the person.

In some embodiments, digital images and video may be used with the support of other types of sensors to recognize the interaction between persons and product items placed in various areas of the store. The computer system may be configured to recognize consumer shopping behavior by estimating a three-dimensional (3D) location of a person's hand using digital images captured by the array of cameras. The recognition may be used by the machine-learning algorithm to recognize and provide a probability of various shopping behavior of the person in the retail environment. The shopping behavior may include the motion of a person's body, arms, or hands in an action of removing a product item from a shelf or returning the product item to the shelf.

In some embodiments, a plurality of image sensors may be used to predict the 3D location of body joints. Red-green-blue (RGB) cameras, as well as infrared (IR) image sensors may be used to capture two-dimensional (2D) images. The 2D images may be analyzed to obtain 3D locations. Alternatively or additionally, a depth camera may be used to determine the depth of a body joint into an area containing a product item. It may be used jointly with the other cameras to estimate the 3D locations of a person's body joints. The 3D hand location of the consumer may be estimated using digital images or video.

In some embodiments, the computer system may use the image data in conjunction with data received from weight sensors and location aware pressure sensors to predict a quantity and type of product items interacted with by the person. The machine-learning algorithm may be trained to connect and recognize certain motions of the person with changes in the placement of the product items. For example, the array of cameras may capture the person reaching for a product item on the shelf. The machine-learning model may be trained to recognize, through the analysis of 3D motions of the person, the motion of the body joints of a consumer which leads to the consumer reaching for the product item placed on the shelf. Using the analysis of the 3D motion alone, the machine-learning algorithm may not be able to obtain a probability of the retail product removed with high confidence if the consumer removed an item from the back of the shelf, or out of the range of the array of cameras. The computer system may obtain data from the weight sensors or location aware pressure sensors to determine a change in the weight or pressure of a particular bin of the shelf to aid in identifying the retail product removed from the smart shelf system with higher confidence.

In some embodiments, the computer system may use data collected by one or more weight sensors or one or more capacitive sensors to determine movement of a product item caused by interaction of a user. As an example and not by way of limitation, one or more load cells using resistive strain gauges may be fixed to one or more beams associated with a shelf. A force applied to the beam may cause a change to the resistance of the strain gauge, thus generating a voltage output. The voltage output may be proportional to the force. The voltage output may be communicated to the computer system through an interface circuit. In this manner, weight of product items placed on different areas of the shelf may be detected. As another example and not by way of limitation, an array of capacitance-sensing elements (e.g., using capacitive sensors) may be placed on a shelf. Because product items have different dielectric constants from air, placing a product item on the shelf may generate a change to the capacitance sensed by one or more of the capacitance-sensing elements. The change to the capacitance may depend on the material of the product item. A footprint of a product item (e.g., an image corresponding to the shape of a bottom surface of the product item, magnitude of signal corresponding to the material of the product item) may be generated based on data collected by the capacitance-sensing elements. Furthermore, a person touching a product item may also cause a change to the capacitance signal. In some embodiments, a shelf may be configured to sense weight and capacitance by integrating weight-sensing load cells with a capacitance-sensing surface. Alternatively, a capacitance-sensing surface may be made weight-sensitive by incorporating a material that changes in capacitance based on force felt. In some embodiments, the computer system may detect movement of a product item, a location of the product item that is moved, or a person's touching the product item based on signals received from the weight sensors and capacitive sensors.

In some embodiments, the computer system may further use data collected by one or more vibration sensors to determine an interaction between a person and a product item. The computer system may comprise a frequency-feature based extraction algorithm to detect an onset of a vibration signal. The system may use visual signals from cameras to assist to identify a product. For example, when a particular product item is picked up, the event may generate a particular vibration frequency, which may be recorded by one or more vibration sensors. Based on identification of the product item by one or more image sensors or one or more other sensors, the system may associate the particular frequency signature with the particular product items. The system may subsequently use the frequency signature to identify the event that this particular product is picked up.

The frequency-feature based extraction algorithm may also be utilized to track and monitor people's behaviors. The system may be configured to sense and analyze vibration caused by human interactions in the store. For example, vibration of the ground, the sound created by footsteps, the opening and closing of cold storage doors, shopping cart usage, pattern of picking up or putting back product, etc may be detected and analyzed by the vibration sensors. These vibration signals, coupled with visual recordings from image sensors, may be used to extract a customer's behavior characteristics. When a person is in a blind spot, or changes her appearance, such that the system has difficulties to identify the person based on image data, the system may use the vibration signals to re-identify the person.

In some embodiments, the computer system may determine, based on data received from one or more of the sensors, a movement path within the automated-checkout store associated with the person. In some embodiments, the computer system may identify one or more features (e.g., appearance features of face, body, or cloths, visual patterns of walking, vibration frequency signature when walking) associated with the person and use the features to track the movement of the person. In some embodiments, the space within the automated-checkout store may be divided into a plurality of regions, each monitored with a set of image sensors (e.g., four cameras at the corners of a rectangular region) and/or one or more other sensors. The person's movement path in each region may be separately tracked by the sensors corresponding to the region. The tracking results for different regions may then be integrated by concatenating overlapping areas and optimizing from the perspective of the entire store perspective. Based on the data collected by the sensors, the computer system may construct a model describing the 3D movement of the person. In some embodiments, one or more piezoelectric sensors or piezo film sensors may be used in conjunction with image sensors to determine a person's movement path within the automated-checkout store. The piezo film sensors may be embedded in the floor of the automated-checkout store (e.g., in one or more floor tiles). The piezo film sensors may generate electrical signals in response to steps of a person. The computer system may determine a trajectory of the person based on signals from a plurality of piezo film sensors located in a plurality of locations within the automated-checkout store.

In some embodiments, data of people trajectory and body key points can also be collected for video analysis to help optimize store layouts and personalized product recommendation. Global optimization can be performed to integrate data from different sensors. For example, total number of people in the store can be detected by monitoring how many people enter through the door. The total number of people in the store can be used in global optimization. For example, if two modules have disagreements on two people images close in distance. If the two images are counted as two people, the total number of people in store may be more than the total number entering the store counted by the system. In that case, the global optimization can be performed to count those two images as one person.

At step 450 of FIG. 4 , the computer system may store information associating the product item with the person. In some embodiments, based on the determined interaction between the person and the product item, the computer system may determine that the person has taken the product item in possession with an intent to purchase the product item. The information associating the product item with the person may indicate that the product item will be purchased by the person. In some embodiments, another determined interaction between the person and the product item (e.g., placing the product item back on a shelf) may indicate that the person intends to return the product to the store. In this case, the computer system may remove the stored information associating the product with the person or store additional information indicating that the product item is has been returned by the person.

In some embodiments, the computer system may recognize an identity of the product item that is interacted with in order to associate the product item with the person. In some embodiments, the computer system may extract, from data received from one or more of the sensors, one or more features associated with the product item. The features may comprise a weight, a shape, a color, a surface force image, a position, or a conductivity. The computer system may then determine, using a machine-learning model, an identity of the product item based on one or more of the extracted features. In some embodiments, for product items that are difficult to distinguish based on the external characteristics (e.g., cloths, electronics) or product items that are of particular importance (e.g., expensive products), the automated-checkout store may use other suitable methods to verify the identity of the product item. For example, RFID tags may be applied to the product items. The store may further comprise one or more RFID sensors to read the RFID tags and determine the identities of the product items.

In some embodiments, characteristics of product items such as weight, visual appearance, surface force image, and conductivity may be used to identify the product. Information about such characteristics of each product may be stored in the computer system. For a product item interacted with by a person, one or more sensors may collect information about such characteristics of the product item. For example, one or more cameras may capture images (e.g., RGB images, images with depth information) of the product item. As another example, one or more weight sensors, capacitive sensors, and/or force sensors may collect information about the weight, shape, conductivity, and surface force image of the product item. The conductivity information may be used to determine the type of material which makes up at least a part of the product. The surface force image may be used to determine footprint of the retail product and the force exerted by the surface of the product.

In some embodiments, data from different sensors may indicate different identities of a product item. The computer system may determine one of the identities based on a confidence score associated with each identity. For example, the computer system may determine, based on data received from a first sensor, a first identity for the product item associated with a first confidence score. The computer system may determine, based on data received from a second sensor, a second identity for the product item associated with a second confidence score. The computer system may select one of the first identity and the second identity as the identity of the product item based on a comparison of the first confidence score and the second confidence score.

In some embodiments, for a characteristic of a product item that may take a value within a range, the computer system may determine the value based on a combination of data from different sensors. For example, the computer system may obtain, based on data received from the sensors, a plurality of values associated with a characteristic of the product item. Each of the values may be determined based on data received from one of the sensors. The computer system may determine a final value corresponding to the characteristic based at least in part on a weighted average of the plurality of values. The weight assigned to each value may be based on a confidence score associated with the sensor corresponding to the value.

At step 460 of FIG. 4 , the computer system may deduct a payment amount from the identified account, wherein the payment amount is based on a price of the product item associated with the person. In some embodiments, the computer system may obtain a price for each product item that has been interacted with by the person (e.g., picked up and placed in a shopping cart). When the person is about to exit the automated-checkout store, the computer system may generate a detailed list of product items purchased by the person, itemized prices, and a total amount to be paid by the person. The itemized receipt may be displayed or printed out for the person by a kiosk or another suitable electronic device (e.g., an iPad). The itemized receipt may also be sent to the person by, for example, emails or text messages. The total amount may then be charged to the account associated with the person. In some embodiments, based on input of the person (e.g., swipe of a card, login information) or pre-stored information, the computer system may obtain and hold a token associated with the person, which may be provided to a third-party payment service provider to charge the person. In some embodiments, the computer system may keep any information about the person without uploading the information to the cloud but only transmit a token associated with the person to an external system. In this manner, the computer system may protect the privacy of the person.

FIG. 7 illustrates an example network environment for anonymous checkout in a store. Depending on the implementation, the network environment may include additional, fewer, or alternative components. The network environment may be implemented in the automated-checkout store illustrated in FIG. 1 . One or more components of the network environment may be used to implement one or more suitable layers illustrated in FIG. 3 . In some embodiments, the network environment illustrated in FIG. 7 may comprise one or more components in a store 700 and one or more components associated with a payment system 730. In some embodiments, the store may comprise a plurality of sensors 710 that collect data from the environment, particularly about product items and customers in the store. In some embodiments, the store may also comprise one or more computer systems 720. A computer system 720 may be an on-premise computer system, a cloud-based computer system, a hybrid computer system, another suitable computer system, or any combination thereof. Each of the computer systems 720 may further comprise one or more servers 721, one or more databases 723, and one or more point-of-sale (POS) systems 722. The computer system 720 may interact with the one or more sensors 710 via the one or more servers 721. The one or more servers 721 may receive data collected by the one or more sensors 710. The data may or may not have been processed locally by computing devices associated with the one or more servers 721. The data may be stored in the one or more databases 723. The one or more databases 723 may comprise a cache, a random-access memory (RAM), a nonvolatile random-access memory (NVRAM), a local hard drive, an SSD drive, a flash drive, a network-attached storage (NAS) appliance, a remote server, a datacenter, a cloud storage service, another suitable storage media, or any combination thereof.

In some embodiments, the POS system may have one or more terminals including, for example, a payment card reader, a near-field communication (NFC) receiver, a Bluetooth receiver, a barcode or quick response (QR) code scanner, other suitable terminals, or any combination thereof. In other embodiments, the POS system 722 may comprise an application, a software distributed as Software as a Service (SaaS), other suitable local or internet-based software solutions, or any combination thereof. In some embodiments, the payment system 730 may be associated with an institution or a network capable of managing financial accounts and payment transactions, such as a credit card issuer, a credit card network, a commercial bank, a blockchain network, other suitable payment systems, or any combination thereof. In some embodiments, the payment system 730 may comprise one or more databases 732 storing information associated with payment accounts and payment transactions. In some embodiments, the payment system 730 may also comprise one or more servers 731 that may be configured to send, receive, process, or respond to payment requests. In some embodiments, each of the one or more servers 731 may comprise one or more physical machines (e.g., server machines) that may individually or collectively perform one or more operations associated with the server 731. In some embodiments, the POS system 722 may interact with the payment system 730. The interaction may include sending requests to the payment system 730, receiving responses from the payment system 730, etc. The POS system 722 may send information to or receive information from the server 721 as well as store information in or retrieve information from the database 723.

FIG. 8 illustrates an example method for collecting a payment while protecting customer privacy in a store. The operations of the method presented below are intended to be illustrative. Depending on the implementation, the workflow may include additional, fewer, or alternative steps performed in various orders or in parallel. In some embodiments, the method illustrated in FIG. 8 may be implemented in the environment as shown in FIG. 1 . In some embodiments, the method illustrated in FIG. 8 may be implemented using one or more of the layers shown in FIG. 3 .

The computer system 720 may receive information associated with a payment account of a person (i.e., a customer) at step 811. The information may be received in one of a plurality of different ways. As an example and not by way of limitation, a POS terminal associated with the POS system 722 may obtain the information when the person swipes a card (e.g., credit card, debit card, stored-value card, etc.), scans a bar code or quick response (“QR”) code, places a mobile device (e.g., a smart phone, a wearable smart device) in proximity to the POS terminal, manually enters payment information, or otherwise provides information associated with the person's payment account. The collection of payment account information may occur when the person enters the store 700, when the person exits the store 700, or any other suitable point of time.

Upon receipt of the information associated with the payment account of the person, the computer system 720 may send a request for a token to a server 731 associated with the payment system 730 at step 813. In some embodiments, the request for the token may comprise an authorization request that requests the payment system 730 to authorize an existing or potential payment. The authorization request may be approved or denied by the payment system 730. In some embodiments, if the payment amount is determined (e.g., the person is ready to checkout) at the time of sending the authorization request, the authorization request may comprise the information associated with the payment account of the person and the payment amount to a server 731 of the payment system 730. In other embodiments, if the payment amount is undetermined at that moment (e.g., the person enters the store but has not done any shopping yet), the authorization request may comprise the information associated with the payment account of the person, and a specific payment amount based on a projected sale amount to the server 731 of the payment system 730. Upon approval of the authorization request, the payment system 730 may place a hold on the person's account for the amount specified in the authorization request. In some embodiments, the computer system 720 may use the POS system 722 to provide the account information of the person to the payment system 730. The POS system 722 may directly send the request for the token to the payment system 730. The POS system 722 may be at least partially isolated from the server 721 or the database 723. For example, the POS system 722 may refrain from providing the account information to the server 721 or block access by the server 721 to such account information. As another example, the POS system 722 may temporarily store the account information and refrain from storing the account information in the database 723. The information associated with the user's payment account may be protected by restricting access and avoiding permanent storage.

In some embodiments, the computer system 720 may receive a response to the request from the server 731 associated with the payment system 730 at step 817. In some embodiments, the payment system 730 may comprise a plurality of servers 731 that may individually or collectively perform one or more operations. In some embodiments, the operations may comprise receiving requests, executing payment transactions, generating tokens associated with payment accounts, responding to requests, other suitable operations, or any combination thereof. In some embodiments, the computer system 720 may send the authorization request to one server 731 and receive the response from a different server 731. The response may comprise information indicating whether the request for the token is approved. In some instances, the request can be denied when the payment account information included in the request is incorrect or inconsistent (e.g., a card owner name not matching a card number), invalid (e.g., a corresponding card is expired) or unfound (e.g., no account information stored in the database 732 matching the payment account information in the request). If the payment system 730 successfully verifies the information in the request, it may generate or retrieve a token corresponding to the payment account of the person. A mapping relationship between the token and the payment account may be stored in the database 732. In some embodiments, the token may comprise ciphertext based on encryption of at least part of the information associated with the payment account of the person that is included in the authorization request. The payment system 730 may return a response to the computer system 720. The response may comprise the token corresponding to the payment account of the person. In some embodiments, the response may also indicate that a potential or existing payment from the payment account associated with the person is authorized. The token may uniquely identify the payment account associated with the person. In some embodiments, the token may uniquely identify a specific transaction that is authorized or a specific payment amount that is approved. The computer system 720 may receive the response from the payment system 730 at step 817.

In some embodiments, the sensors 710 may collect data associated with the person at step 810. The data collection by the sensors 710 may be continuous, event-triggered, periodical, or in another suitable manner. The computer system 720 may receive from the sensors 710 the data associated with the person at step 819. The computer system 720 may extract a plurality of features of the person from the received data at step 821. The step 810 and 819 may repeat one or more times or be performed continuously prior or subsequent to various other steps illustrated in FIG. 8 . For example, during a person's presence in the store 700, sensors 710 may collect data associated with the person at step 810 at various points of time and provide such data to the computer system at step 819 at various points of time. The features of the person may be associated with, for example, facial, body, or hair characteristics of the person, clothing of the person, measurements of the person such as height or weight, a distinctive gait or walking style of the person, other suitable characteristics of the person, or any combination thereof. In some embodiments, a feature of the person may take a value within a range. The computer system 720 may determine the value based on a combination of data from different sensors. For example, the computer system 720 may extract a plurality of features of the person by first obtaining, based on the data received from the sensors, a plurality of values associated with a feature of the person. Each of the values may be determined based on the data received from one of the sensors. The computer system 720 may then determine a final value corresponding to the feature of the person based on a weighted average of the plurality of values. The final value may subsequently be assigned to the corresponding feature associated with the person. As another example, the computer system 720 may determine a plurality of candidate values for a feature of the person based on data received from the sensors 710. The computer system 720 may assign a probability score or rating to each of the candidate values and select the candidate value having the highest probability score or rating to be the final value of the feature.

In some embodiments, the computer system 720 may store the token received from the payment system 730 in correspondence to information associated with the extracted features of the person at step 823. In some embodiments, the information may comprise one or more of the extracted features of the person. In other embodiments, the information may comprise a representation generated by the computer system 720 based on one or more of the extracted features. For example, the computer system 720 may store the token and information associated with the extracted features in association with an identifier of the person. In some embodiments, the one or more extracted features may be encrypted before being included in the information or being used to generate the representation.

In some embodiments, the computer system 720 may create a log for the person and link the log to the information associated with the extracted features of the person. The log may be used to track the person's interactions with one or more product items, such as taking an item from a shelf, dropping an item in a shopping cart, returning an item to a shelf, consuming an item, other suitable interactions, or any combination thereof. The log may be implemented as a vector, a linked-list, a queue, a stack, an object, or any suitable data structure. The log may be stored in a storage medium associated with the computer system 720, such as the database 723. In some embodiments, the store may preserve the log only for the period of time during which the person is shopping in the store. In other embodiments, the store may preserve the log for a longer period of time to support after-sales services such as order lookup, refund, return, warranty services, etc. In some embodiments, the log may be created upon the person's entrance of the store and be connected to an identifier of the person. The log associated with the person may be retrieved by the computer system 720 based on the person's identifier. In some embodiments, the log may be linked with the information associated with the payment account of the person.

In some embodiments, at step 825, the computer system 720 may identify one or more interactions of the person with one or more product items based on the data associated with the person received from the sensors 710. In some embodiments, identifying an interaction between the person and a product item may comprise determining, based on the data received from one or more of the sensors 710, that the person is located in proximity to the product item during a period of time, detecting one or more movements of a hand of the person with respect to the product item, and determining the interaction based on the one or more detected movements. The identification of persons, product items, and interactions between persons and product items is described in further details herein at least with regard to FIGS. 4, 5, and 6 .

In some embodiments, when the person is ready to checkout, the computer system 720 may generate a bill based on the identified one or more interactions associated with the person at step 827. In some embodiments, the computer system 720 may generate the bill by creating a log associated with the person, adding one or more entries to the log, and generating the bill based on the log by the computer system 720. Each entry in the log may include information of one or more identified interactions of the person with one or more product items. For example, once the computer system 720 determines that a customer has taken a bottle of drink, it may add an entry to the log associated with the customer to represent this interaction. Specifically, the computer system 720 may first obtain the log file associated with the customer and the product item information of the bottle of drink. The computer system 720 may then add an entry as shown in Table I to the log. In some embodiments, the information in an entry may be encoded or encrypted. Upon checkout, the computer system 720 may retrieve the log associated with the person and iterate the entries therein. The computer system 720 may use preset algorithms to determine the product items purchased by the person based on the logged interactions and calculate a total purchase amount accordingly. The total purchase amount may be included in the bill. In some embodiments, the computer system 720 may also generate an itemized receipt for the customer.

In some embodiments, the computer system 720 may subsequently send a payment request comprising the total purchase amount and the token associated with the payment account of the person to the payment system 730 at step 829. In some embodiments, the computer system 720 may send one payment request for each transaction or customer. In other embodiments, the computer system 720 may collect a plurality of payment requests and send them as a batch to the payment system 730.

In some embodiments, the computer system 720 may receive a response from the payment system 730 for the payment request at step 831. The response may comprise a confirmation indicating the request is approved. Upon approval, the payment may be cleared immediately, or within a certain timeframe. In some cases, the payment system 730 may decline the payment request, for example, when the token included in the payment request is invalid (e.g., the token not matching any account), when the amount in the payment request is beyond the allowed maximum payment associated with the account identified by the token (e.g., the amount is greater than the available credit of the customer's credit card), or for other suitable reasons. In some embodiments, after completion of the payment transaction, the computer system 720 may remove information associated with the person for privacy protection purposes. For example, at step 835, the computer system 720 may remove the stored token associated with the payment account of the person and the extracted features of the person after receiving payment confirmation from the payment system 730. In some embodiments, the computer system 720 may also remove the representation of one or more of the extracted features of the person and the tracked interactions associated with the person. In other embodiments, the computer system 720 may keep at least part of the data associated with the person for a certain period of time to handle after-sales service requests such as order lookup, refund, exchange, warranty services, etc.

In some embodiments, the store 700 may adopt one or more encryption solutions to protect the data associated with the person. The data may include the person's payment account information, appearance information (such as data collected by sensors 710, one or more extracted features, or a representation of the person), movements, interactions with product items, other suitable information associated with the person, or any combination thereof. In some embodiments, the solutions may include client-side (local) encryption, server-side (remote) encryption, another suitable encryption solution, or any combination thereof. For example, the store 700 may choose client-side encryption when it stores data locally and prefers to send encrypted version of data to remote servers, data centers, or cloud services. For another example, the store may choose server-side encryption when it stores data remotely. In addition, the store 700 may also adopt one or more of a plurality of encryption methods such as software-based methods (e.g., Triple DES, Diffie-Hellman, RSA, Blowfish, Twofish, AES) hard-ware based methods (e.g., TRSM, hardware encryption appliances), or any encryption methods provided by third parties (e.g., cloud service providers, cryptocurrency networks). In some embodiments, the store may adopt data-at-rest encryption (i.e., encrypting the data while it is stored on any device or network). In other embodiments, the store may adopt data-in-transmission encryption (i.e., encrypting the data while it's traveling from network to network or being transferred from a local storage device to a remote storage service).

FIG. 9 illustrates an example method for anonymous checkout in a store. The method 900 may be performed by a device, apparatus, or system for anonymous checkout in a store. Depending on the implementation, the method 900 may include additional, fewer, or alternative steps performed in various orders or in parallel. The steps of method 900 may be reorganized for parallel execution, or reordered, as applicable.

Block 910 includes receiving, by a computer system, information associated with a payment account of a person.

Block 920 includes sending, by the computer system to a server associated with a payment system, the received information associated with the payment account of the person.

Block 930 includes receiving, by the computer system from the server associated with the payment system, a token associated with the payment account of the person. In some embodiments, the token associated with the payment account of the person may comprise: ciphertext based on encryption of at least part of the received information associated with the payment account of the person

Block 940 includes receiving, by the computer system from a plurality of sensors, data associated with the person.

Block 950 includes extracting, by the computer system based on the received data, a plurality of features associated with the person. In some embodiments, the extracting a plurality of features of the person may comprise: obtaining, by the computer system based on the data received from the sensors, a plurality of values associated with a feature of the person, wherein each of the values is determined based on the data received from one of the sensors; and determining, by the computer system, a final value corresponding to the feature of the person based on a weighted average of the plurality of values.

Block 960 includes storing, by the computer system, the received token in correspondence with information associated with the extracted features of the person. In some embodiments, the storing the received token in correspondence with information associated with the extracted features of the person may comprise: generating a representation of one or more of the extracted features; and storing the received token in correspondence with the generated representation. In some embodiments, the generating a representation of one or more of the extracted features may comprise: encrypting information associated with the one or more of the extracted features.

In some embodiments, the method may further comprise: identifying, by the computer system based on the received data associated with the person, one or more interactions of the person with one or more product items; generating, by the computer system, a bill based on the identified one or more interactions, wherein the bill comprises a payment amount; and sending, by the computer system to the server associated with the payment system, a payment request comprising the payment amount and the token associated with the payment account of the person. In some embodiments, the identifying one or more interactions of the person with one or more product items may comprise: determining, based on the data received from one or more of the sensors, that the person is located in proximity to one of the one or more product items; detecting one or more movements of a hand of the person with respect to the product item; and identifying one of the interactions based on the one or more detected movements. In some embodiments, the generating a bill based on the identified one or more interactions may comprise: creating, by the computer system, a log associated with the person; adding, by the computer system, a plurality of entries to the log, wherein one or more of the entries correspond to the one or more interactions of the person with the one or more product items; and generating the bill based on the log. In some embodiments, the method may further comprise, subsequent to the sending the payment amount and the token associated with the payment account of the person: deleting the stored token associated with the payment account of the person and the extracted features of the person.

FIG. 10 illustrates an example electronic device. The device illustrated in FIG. 10 may be used to implement the entirety or parts of various devices or systems described herein, such as one or more components of the computer system 720, one or more components of the payment system 730, or part of one or more of the sensors 710. The electronic device 1000 may comprise a bus 1010 or other communication mechanism for communicating information and one or more hardware processors 1020 coupled with bus 1010 for processing information. Hardware processor(s) 1020 may be, for example, one or more general purpose microprocessors.

The electronic device 1000 may also include a main memory 1030, such as a random-access memory (RAM), cache and/or other dynamic storage devices, coupled to bus 1010 for storing information and instructions to be executed by processor(s) 1020. Main memory 1030 also may be used for storing temporary variables or other intermediate information during execution of instructions to be executed by processor(s) 1020. Such instructions, when stored in storage media accessible to processor(s) 1020, may render electronic device 1000 into a special-purpose machine that is customized to perform the operations specified in the instructions. Main memory 1030 may include non-volatile media and/or volatile media. Non-volatile media may include, for example, optical or magnetic disks. Volatile media may include dynamic memory. Common forms of media may include, for example, a floppy disk, a flexible disk, hard disk, solid state drive, magnetic tape, or any other magnetic data storage medium, a CD-ROM, any other optical data storage medium, any physical medium with patterns of holes, a RAM, a DRAM, a PROM, and EPROM, a FLASH-EPROM, NVRAM, any other memory chip or cartridge, or networked versions of the same.

The electronic device 1000 may implement the techniques described herein using customized hard-wired logic, one or more ASICs or FPGAs, firmware and/or program logic which in combination with the electronic device may cause or program electronic device 1000 to be a special-purpose machine. According to one embodiment, the techniques herein are performed by electronic device 1000 in response to processor(s) 1020 executing one or more sequences of one or more instructions contained in main memory 1030. Such instructions may be read into main memory 1030 from another storage medium, such as storage device 1040. Execution of the sequences of instructions contained in main memory 1030 may cause processor(s) 1020 to perform the process steps described herein. For example, the processes/methods disclosed herein may be implemented by computer program instructions stored in main memory 1030. When these instructions are executed by processor(s) 1020, they may perform the steps as shown in corresponding figures and described above. In alternative embodiments, hard-wired circuitry may be used in place of or in combination with software instructions.

The electronic device 1000 also includes a communication interface 1050 coupled to bus 1010. Communication interface 1050 may provide a two-way data communication coupling to one or more network links that are connected to one or more networks. As another example, communication interface 1050 may be a local area network (LAN) card to provide a data communication connection to a compatible LAN (or WAN component to communicated with a WAN). Wireless links may also be implemented.

The performance of certain of the operations may be distributed among the processors, not only residing within a single machine, but deployed across a number of machines. In some example embodiments, the processors or processor-implemented engines may be located in a single geographic location (e.g., within a home environment, an office environment, or a server farm). In other example embodiments, the processors or processor-implemented engines may be distributed across a number of geographic locations.

Each of the processes, methods, and algorithms described in the preceding sections may be embodied in, and fully or partially automated by, code modules executed by one or more computer systems or computer processors comprising computer hardware. The processes and algorithms may be implemented partially or wholly in application-specific circuitry.

When the functions disclosed herein are implemented in the form of software functional units and sold or used as independent products, they can be stored in a processor executable non-volatile computer readable storage medium. Particular technical solutions disclosed herein (in whole or in part) or aspects that contributes to current technologies may be embodied in the form of a software product. The software product may be stored in a storage medium, comprising a number of instructions to cause a computing device (which may be a personal computer, a server, a network device, and the like) to execute all or some steps of the methods of the embodiments of the present application. The storage medium may comprise a flash drive, a portable hard drive, ROM, RAM, a magnetic disk, an optical disc, another medium operable to store program code, or any combination thereof.

Particular embodiments further provide a system comprising a processor and a non-transitory computer-readable storage medium storing instructions executable by the processor to cause the system to perform operations corresponding to steps in any method of the embodiments disclosed above. Particular embodiments further provide a non-transitory computer-readable storage medium configured with instructions executable by one or more processors to cause the one or more processors to perform operations corresponding to steps in any method of the embodiments disclosed above.

Embodiments disclosed herein may be implemented through a cloud platform, a server or a server group (hereinafter collectively the “service system”) that interacts with a client. The client may be a terminal device or a client registered by a user at a platform, wherein the terminal device may be a mobile terminal, a personal computer (PC), and any device that may be installed with a platform application program.

The various features and processes described above may be used independently of one another or may be combined in various ways. All possible combinations and sub-combinations are intended to fall within the scope of this disclosure. In addition, certain method or process blocks may be omitted in some implementations. The methods and processes described herein are also not limited to any particular sequence, and the blocks or states relating thereto can be performed in other sequences that are appropriate. For example, described blocks or states may be performed in an order other than that specifically disclosed, or multiple blocks or states may be combined in a single block or state. The example blocks or states may be performed in serial, in parallel, or in some other manner. Blocks or states may be added to or removed from the disclosed example embodiments. The exemplary systems and components described herein may be configured differently than described. For example, elements may be added to, removed from, or rearranged compared to the disclosed example embodiments.

The various operations of exemplary methods described herein may be performed, at least partially, by an algorithm. The algorithm may be comprised in program codes or instructions stored in a memory (e.g., a non-transitory computer-readable storage medium described above). Such algorithm may comprise a machine learning algorithm. In some embodiments, a machine learning algorithm may not explicitly program computers to perform a function but can learn from training data to make a predictions model that performs the function.

The various operations of exemplary methods described herein may be performed, at least partially, by one or more processors that are temporarily configured (e.g., by software) or permanently configured to perform the relevant operations. Whether temporarily or permanently configured, such processors may constitute processor-implemented engines that operate to perform one or more operations or functions described herein.

Similarly, the methods described herein may be at least partially processor-implemented, with a particular processor or processors being an example of hardware. For example, at least some of the operations of a method may be performed by one or more processors or processor-implemented engines. Moreover, the one or more processors may also operate to support performance of the relevant operations in a “cloud computing” environment or as a “software as a service” (SaaS). For example, at least some of the operations may be performed by a group of computers (as examples of machines including processors), with these operations being accessible via a network (e.g., the Internet) and via one or more appropriate interfaces (e.g., an Application Program Interface (API)).

The performance of certain of the operations may be distributed among the processors, not only residing within a single machine, but deployed across a number of machines. In some example embodiments, the processors or processor-implemented engines may be located in a single geographic location (e.g., within a home environment, an office environment, or a server farm). In other example embodiments, the processors or processor-implemented engines may be distributed across a number of geographic locations.

Throughout this specification, plural instances may implement components, operations, or structures described as a single instance. Although individual operations of one or more methods are illustrated and described as separate operations, one or more of the individual operations may be performed concurrently, and nothing requires that the operations be performed in the order illustrated. Structures and functionality presented as separate components in example configurations may be implemented as a combined structure or component. Similarly, structures and functionality presented as a single component may be implemented as separate components. These and other variations, modifications, additions, and improvements fall within the scope of the subject matter herein.

Although an overview of the subject matter has been described with reference to specific example embodiments, various modifications and changes may be made to these embodiments without departing from the broader scope of embodiments of the present disclosure. Such embodiments of the subject matter may be referred to herein, individually or collectively, by the term “invention” merely for convenience and without intending to voluntarily limit the scope of this application to any single disclosure or concept if more than one is, in fact, disclosed.

The embodiments illustrated herein are described in sufficient detail to enable those skilled in the art to practice the teachings disclosed. Other embodiments may be used and derived therefrom, such that structural and logical substitutions and changes may be made without departing from the scope of this disclosure. The Detailed Description, therefore, is not to be taken in a limiting sense, and the scope of various embodiments is defined only by the appended claims, along with the full range of equivalents to which such claims are entitled.

Any process descriptions, elements, or blocks in the flow diagrams described herein and/or depicted in the attached figures should be understood as potentially representing modules, segments, or portions of code which include one or more executable instructions for implementing specific logical functions or steps in the process. Alternate implementations are included within the scope of the embodiments described herein in which elements or functions may be deleted, executed out of order from that shown or discussed, including substantially concurrently or in reverse order, depending on the functionality involved, as would be understood by those skilled in the art.

As used herein, the term “or” may be construed in either an inclusive or exclusive sense. Moreover, plural instances may be provided for resources, operations, or structures described herein as a single instance. Additionally, boundaries between various resources, operations, engines, and data stores are somewhat arbitrary, and particular operations are illustrated in a context of specific illustrative configurations. Other allocations of functionality are envisioned and may fall within a scope of various embodiments of the present disclosure. In general, structures and functionality presented as separate resources in the example configurations may be implemented as a combined structure or resource. Similarly, structures and functionality presented as a single resource may be implemented as separate resources. These and other variations, modifications, additions, and improvements fall within a scope of embodiments of the present disclosure as represented by the appended claims. The specification and drawings are, accordingly, to be regarded in an illustrative rather than a restrictive sense.

The term “include” or “comprise” is used to indicate the existence of the subsequently declared features, but it does not exclude the addition of other features. Conditional language, such as, among others, “can,” “could,” “might,” or “may,” unless specifically stated otherwise, or otherwise understood within the context as used, is generally intended to convey that certain embodiments include, while other embodiments do not include, certain features, elements and/or steps. Thus, such conditional language is not generally intended to imply that features, elements and/or steps are in any way required for one or more embodiments or that one or more embodiments necessarily include logic for deciding, with or without user input or prompting, whether these features, elements and/or steps are included or are to be performed in any particular embodiment. In addition, herein, “or” is inclusive and not exclusive, unless expressly indicated otherwise or indicated otherwise by context. Therefore, herein, “A or B” means “A, B, or both,” unless expressly indicated otherwise or indicated otherwise by context. Moreover, “and” is both joint and several, unless expressly indicated otherwise or indicated otherwise by context. Therefore, herein, “A and B” means “A and B, jointly or severally,” unless expressly indicated otherwise or indicated otherwise by context. 

1. A method for anonymous checkout in a store, comprising receiving, by a computer system of the store, information associated with a payment account of a person; sending, by the computer system to a server associated with a payment system, the received information associated with the payment account of the person; receiving, by the computer system from the server associated with the payment system, a token associated with the payment account of the person; receiving, by the computer system from a plurality of sensors, data associated with the person; extracting, by the computer system based on the received data associated with the person, a plurality of features of the person; and storing, by the computer system, the received token in correspondence with information associated with the extracted features of the person; receiving authentication of personal information from the person via the person's identifying items, wherein the person's identifying items comprise a phone, a credit card, a membership card, a QR code or the user's biometrics information; capturing a plurality of videos and images of the person by a plurality of cameras; processing the plurality of videos and images to track the person in each field of view of the plurality of cameras; finding information for a trip of the person in the retail store based on the processing of the plurality of videos and images, wherein the information for the trip comprises time spent of the person at each shelf in the retail store, time the person spent to compare different items, time the person spent on certain category of products; and providing dynamic pricing of items to the person based the information for the trip of the person, wherein the dynamic pricing of the times are determined by time and date of visit of the person.
 2. The method of claim 1, further comprising: identifying, by the computer system based on the received data associated with the person, one or more interactions of the person with one or more product items; generating, by the computer system, a bill based on the identified one or more interactions, wherein the bill comprises a payment amount; and sending, by the computer system to the server associated with the payment system, a payment request comprising the payment amount and the token associated with the payment account of the person.
 3. The method of claim 2, wherein the identifying one or more interactions of the person with one or more product items comprises: determining, based on the data received from one or more of the sensors, that the person is in proximity to one of the one or more product items; detecting one or more movements of a hand of the person with respect to the product item; and identifying one of the interactions based on the one or more detected movements.
 4. The method of claim 2, wherein the generating a bill based on the identified one or more interactions comprises: creating, by the computer system, a log associated with the person; adding, by the computer system, a plurality of entries to the log, wherein one or more of the entries correspond to the one or more interactions of the person with the one or more product items; and generating the bill based on the log.
 5. The method of claim 2, further comprising, subsequent to the sending the payment amount and the token associated with the payment account of the person: deleting the stored token associated with the payment account of the person and the extracted features of the person.
 6. The method of claim 1, wherein the token associated with the payment account of the person comprises: ciphertext based on encryption of at least part of the received information associated with the payment account of the person.
 7. The method of claim 1, wherein the storing the received token in correspondence with information associated with the extracted features of the person comprises: generating a representation of one or more of the extracted features; and storing the received token in correspondence with the generated representation.
 8. The method of claim 7, wherein the generating a representation of one or more of the extracted features comprises: encrypting information associated with the one or more of the extracted features.
 9. The method of claim 1, wherein the extracting a plurality of features of the person comprises: obtaining, by the computer system based on the data received from the sensors, a plurality of values associated with a feature of the person, wherein each of the values is determined based on the data received from one of the sensors; and determining, by the computer system, a final value corresponding to the feature of the person based on a weighted average of the plurality of values.
 10. A system for anonymous checkout in a store comprising a computer system and a plurality of sensors, the computer system comprising one or more processors and one or more non-transitory computer-readable storage media storing instructions executable by the one or more processors to cause the system to perform operations comprising: receiving, by the computer system, information associated with a payment account of a person; sending, by the computer system to a server associated with a payment system, the received information associated with the payment account of the person; receiving, by the computer system from the server associated with the payment system, a token associated with the payment account of the person; receiving, by the computer system from the sensors, data associated with the person; extracting, by the computer system based on the received data associated with the person, a plurality of features of the person; and storing, by the computer system, the received token in correspondence with information associated with the extracted features of the person; capturing a plurality of videos and images of the person by a plurality of cameras; processing the plurality of videos and images to track the person in each field of view of the plurality of cameras; finding information for a trip of the person in the retail store based on the processing of the plurality of videos and images, wherein the information for the trip comprises time spent of the person at each shelf in the retail store, time the person spent to compare different items, time the person spent on certain category of products; and providing dynamic pricing of items to the person based the information for the trip of the person, wherein the dynamic pricing of the times are determined by time and date of visit of the person.
 11. The system of claim 10, wherein the operations further comprise: identifying, by the computer system based on the received data associated with the person, one or more interactions of the person with one or more product items; generating, by the computer system, a bill based on the identified one or more interactions, wherein the bill comprises a payment amount; and sending, by the computer system to the server associated with the payment system, a payment request comprising the payment amount and the token associated with the payment account of the person.
 12. The system of claim 11, wherein the generating a bill based on the identified one or more interactions comprises: creating, by the computer system, a log associated with the person; adding, by the computer system, a plurality of entries to the log, wherein one or more of the entries correspond to the one or more interactions of the person with the one or more product items; and generating the bill based on the log.
 13. The system of claim 10, wherein the token associated with the payment account of the person comprises: ciphertext based on encryption of at least part of the received information associated with the payment account of the person.
 14. The system of claim 10, wherein the storing the received token in correspondence with information associated with the extracted features of the person comprises: generating a representation of one or more of the extracted features; and storing the received token in correspondence with the generated representation.
 15. The system of claim 14, wherein the generating a representation of one or more of the extracted features comprises: encrypting information associated with the one or more of the extracted features.
 16. A non-transitory computer-readable storage medium for anonymous checkout in a store, configured with instructions executable by one or more processors to perform operations comprising: receiving information associated with a payment account of a person; sending, to a server associated with a payment system, the received information associated with the payment account of the person; receiving, from the server associated with the payment system, a token associated with the payment account of the person; receiving, from a plurality of sensors, data associated with the person; extracting, based on the received data associated with the person, a plurality of features of the person; and storing the received token in correspondence with information associated with the extracted features of the person.
 17. The non-transitory computer-readable storage medium of claim 16, wherein the operations further comprise: identifying, based on the received data associated with the person, one or more interactions of the person with one or more product items; generating a bill based on the identified one or more interactions, wherein the bill comprises a payment amount; and sending, to the server associated with the payment system, a payment request comprising the payment amount and the token associated with the payment account of the person.
 18. The non-transitory computer-readable storage medium of claim 16, wherein the token associated with the payment account of the person comprises: ciphertext based on encryption of at least part of the received information associated with the payment account of the person.
 19. The non-transitory computer-readable storage medium of claim 16, wherein the storing the received token in correspondence with information associated with the extracted features of the person comprises: generating a representation of one or more of the extracted features; and storing the received token in correspondence with the generated representation.
 20. The non-transitory computer-readable storage medium of claim 19, wherein the generating a representation of one or more of the extracted features comprises: encrypting information associated with the one or more of the extracted features. 